$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: On3et92Sif6SOlS/0wMwBsSh34wtK2S41s6QpHP1vYM= Subject key identifier: 50:8D:0F:04:AD:4C:8D:5D:17:4B:68:3B:8F:BF:46:87:AE:5B:9A:B5 Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 74C726832FD8E78F39E2D45F5D43D9055A796CA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 08:24:47 +0000 Manifest this update: Sat 14 Nov 2026 08:19:47 +0000 Manifest next update: Sun 15 Nov 2026 10:13:47 +0000 Files and hashes: 1: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: wI61yIjOL1qH3T788qUJd9Td7ouk+4GL37Socy/EDZQ=) 2: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 3: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) 4: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:26:83:2f:d8:e7:8f:39:e2:d4:5f:5d:43:d9:05:5a:79:6c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Nov 14 08:19:47 2026 GMT Not After : Nov 15 10:13:47 2026 GMT Subject: CN=508D0F04AD4C8D5D174B683B8FBF4687AE5B9AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:e7:6c:62:2e:2f:61:68:40:f3:a5:f7:f2: ab:f3:23:84:c1:6c:cd:63:02:33:88:eb:3e:9a:0f: ee:ed:06:21:84:78:e5:43:84:b8:8d:93:aa:3a:70: cc:07:ea:da:6c:59:89:97:fc:c8:05:70:d4:a5:c3: a4:c7:29:13:81:7d:11:1e:28:14:33:7f:08:ee:f7: b8:4e:76:89:13:07:b8:16:c0:81:41:ed:2c:23:c0: cd:dd:18:b2:85:7a:05:98:5c:62:33:b0:99:9d:dc: b5:25:1f:c5:c8:35:f7:f7:ad:21:4f:ad:07:a9:85: 14:d3:83:cb:16:e2:28:83:1a:d8:70:88:e1:5e:ec: 93:4a:20:0a:43:a2:3d:d6:47:04:96:e3:a0:29:77: 2e:aa:9a:d1:48:ae:b4:1e:ce:70:35:6d:64:72:6a: 48:c5:89:cc:de:ae:2d:3a:a9:f4:f0:20:d9:6d:dd: 14:04:81:33:27:d8:67:ff:eb:90:cc:60:16:a2:af: f2:07:14:f7:68:a5:42:6e:1d:b5:97:23:e7:06:e8: 6a:cd:02:cc:62:b7:9d:22:ff:d0:d1:52:9e:b9:79: 83:92:ec:08:7a:25:31:d4:28:22:9b:ec:bf:d8:4d: c5:18:48:12:9b:fa:f7:1f:1b:02:89:db:76:08:0e: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8D:0F:04:AD:4C:8D:5D:17:4B:68:3B:8F:BF:46:87:AE:5B:9A:B5 X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:33:65:f4:43:f8:de:24:4b:9d:30:75:35:54:87:12:c1:ca: 1c:31:6a:a4:6e:6e:c2:ed:da:1d:5c:5c:e9:ea:e1:e8:f4:90: 52:e1:0c:02:b9:d7:eb:8e:18:f2:ca:05:61:2c:cb:a1:18:da: 9c:70:20:26:52:60:84:56:d7:13:06:bc:5f:3d:8a:a1:39:88: e1:89:28:8d:d0:f1:1b:b8:fa:de:bf:3b:b8:eb:81:c0:1f:ae: 26:6e:87:3a:0c:60:12:1a:f8:79:86:ef:e9:53:7c:85:75:70: 1a:a4:5b:72:29:98:17:3f:40:da:c6:79:1d:fa:98:a0:f6:6e: 14:1f:6d:18:c8:d2:aa:f1:5e:99:c4:c8:ed:03:b3:4e:66:a6: b6:92:e4:ce:66:5d:8e:08:dc:bb:99:0e:18:da:69:70:da:39: 16:bb:f0:b8:25:00:74:61:09:e8:0d:41:d5:98:2a:cc:61:80: f2:72:07:37:0e:b5:a2:df:25:65:58:f8:0b:27:89:9b:f1:36: 74:c6:15:1f:ab:84:2c:96:f8:3c:3f:7a:08:34:34:bf:d7:74: 32:3a:7d:eb:7e:a1:36:e7:ed:43:04:46:1b:ce:e1:0f:12:d5: e2:9d:ed:2c:c1:4a:33:05:46:0e:98:35:db:8c:83:b5:03:dd: e2:ee:02:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMcmgy/Y54854tRfXUPZBVp5bKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjExMTQwODE5NDdaFw0yNjExMTUxMDEzNDdaMDMxMTAvBgNV BAMTKDUwOEQwRjA0QUQ0QzhENUQxNzRCNjgzQjhGQkY0Njg3QUU1QjlBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazedsYi4vYWhA86X38qvzI4TB bM1jAjOI6z6aD+7tBiGEeOVDhLiNk6o6cMwH6tpsWYmX/MgFcNSlw6THKROBfREe KBQzfwju97hOdokTB7gWwIFB7SwjwM3dGLKFegWYXGIzsJmd3LUlH8XINff3rSFP rQephRTTg8sW4iiDGthwiOFe7JNKIApDoj3WRwSW46Apdy6qmtFIrrQeznA1bWRy akjFiczeri06qfTwINlt3RQEgTMn2Gf/65DMYBair/IHFPdopUJuHbWXI+cG6GrN Asxit50i/9DRUp65eYOS7Ah6JTHUKCKb7L/YTcUYSBKb+vcfGwKJ23YIDiSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUI0PBK1MjV0XS2g7j79Gh65bmrUwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4zZfRD+N4kS50wdTVUhxLByhwxaqRubsLt 2h1cXOnq4ej0kFLhDAK51+uOGPLKBWEsy6EY2pxwICZSYIRW1xMGvF89iqE5iOGJ KI3Q8Ru4+t6/O7jrgcAfriZuhzoMYBIa+HmG7+lTfIV1cBqkW3IpmBc/QNrGeR36 mKD2bhQfbRjI0qrxXpnEyO0Ds05mpraS5M5mXY4I3LuZDhjaaXDaORa78LglAHRh CegNQdWYKsxhgPJyBzcOtaLfJWVY+AsniZvxNnTGFR+rhCyW+Dw/egg0NL/XdDI6 fet+oTbn7UMERhvO4Q8S1eKd7SzBSjMFRg6YNduMg7UD3eLuArE= -----END CERTIFICATE-----Generated at Sat Nov 14 23:34:28 2026 by rpki-client